https://tools.kali.org/web-applications/skipfish
3) grabber
grabber --spider 1 --sql --xss --url http://192.168.x.x
grabber can spider and test for sqli and xss.
It’s a very basic tool, and is only recommended for small sites.
Features:
Cross-Site Scripting
SQL Injection (there is also a special Blind SQL Injection module)
File Inclusion
Backup files check
Simple AJAX check (parse every JavaScript and get the URL and try to get the parameters)
Hybrid analysis/Crystal ball testing for PHP application using PHP-SAT
JavaScript source code analyzer: Evaluation of the quality/correctness of the JavaScript with JavaScript Lint
Generation of a file [session_id, time(t)] for next stats analysis.
This is very informative and well detailed. That is great and very helpful for hacking beginners. Thanks!